[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 69.234186][ T26] audit: type=1800 audit(1575237868.798:25): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 69.267745][ T26] audit: type=1800 audit(1575237868.808:26): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 69.318277][ T26] audit: type=1800 audit(1575237868.808:27): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.38' (ECDSA) to the list of known hosts. 2019/12/01 22:04:55 parsed 1 programs 2019/12/01 22:04:57 executed programs: 0 syzkaller login: [ 98.192195][ T8961] IPVS: ftp: loaded support on port[0] = 21 [ 98.203981][ T8964] IPVS: ftp: loaded support on port[0] = 21 [ 98.207193][ T8965] IPVS: ftp: loaded support on port[0] = 21 [ 98.221615][ T8968] IPVS: ftp: loaded support on port[0] = 21 [ 98.230674][ T8969] IPVS: ftp: loaded support on port[0] = 21 [ 98.240769][ T8966] IPVS: ftp: loaded support on port[0] = 21 [ 98.504300][ T8961] chnl_net:caif_netlink_parms(): no params data found [ 98.513799][ T8966] chnl_net:caif_netlink_parms(): no params data found [ 98.603705][ T8964] chnl_net:caif_netlink_parms(): no params data found [ 98.640443][ T8965] chnl_net:caif_netlink_parms(): no params data found [ 98.707313][ T8966] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.715044][ T8966] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.722929][ T8966] device bridge_slave_0 entered promiscuous mode [ 98.735769][ T8966] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.742878][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.751043][ T8966] device bridge_slave_1 entered promiscuous mode [ 98.784887][ T8961] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.792568][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.800892][ T8961] device bridge_slave_0 entered promiscuous mode [ 98.830943][ T8965] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.838461][ T8965] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.846239][ T8965] device bridge_slave_0 entered promiscuous mode [ 98.856461][ T8965] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.863591][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.871502][ T8965] device bridge_slave_1 entered promiscuous mode [ 98.880891][ T8961] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.888044][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.895734][ T8961] device bridge_slave_1 entered promiscuous mode [ 98.910270][ T8966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.922413][ T8966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.951378][ T8968] chnl_net:caif_netlink_parms(): no params data found [ 98.972479][ T8964] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.979834][ T8964] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.987526][ T8964] device bridge_slave_0 entered promiscuous mode [ 99.001473][ T8969] chnl_net:caif_netlink_parms(): no params data found [ 99.034175][ T8964] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.042351][ T8964] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.050460][ T8964] device bridge_slave_1 entered promiscuous mode [ 99.073174][ T8965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.091594][ T8961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.107246][ T8966] team0: Port device team_slave_0 added [ 99.114928][ T8965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.142942][ T8961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.153491][ T8964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.167985][ T8966] team0: Port device team_slave_1 added [ 99.191658][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.199694][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.207558][ T8968] device bridge_slave_0 entered promiscuous mode [ 99.222458][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.229753][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.237555][ T8968] device bridge_slave_1 entered promiscuous mode [ 99.245920][ T8964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.276535][ T8965] team0: Port device team_slave_0 added [ 99.288512][ T8965] team0: Port device team_slave_1 added [ 99.311803][ T8964] team0: Port device team_slave_0 added [ 99.320609][ T8964] team0: Port device team_slave_1 added [ 99.326427][ T8969] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.334673][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.343131][ T8969] device bridge_slave_0 entered promiscuous mode [ 99.352766][ T8961] team0: Port device team_slave_0 added [ 99.409848][ T8965] device hsr_slave_0 entered promiscuous mode [ 99.447966][ T8965] device hsr_slave_1 entered promiscuous mode [ 99.581128][ T8966] device hsr_slave_0 entered promiscuous mode [ 99.618108][ T8966] device hsr_slave_1 entered promiscuous mode [ 99.677838][ T8966] debugfs: Directory 'hsr0' with parent '/' already present! [ 99.686632][ T8969] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.694032][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.701856][ T8969] device bridge_slave_1 entered promiscuous mode [ 99.716157][ T8961] team0: Port device team_slave_1 added [ 99.723346][ T8968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.773257][ T8969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.832117][ T8964] device hsr_slave_0 entered promiscuous mode [ 99.897960][ T8964] device hsr_slave_1 entered promiscuous mode [ 99.948052][ T8964] debugfs: Directory 'hsr0' with parent '/' already present! [ 99.956862][ T8968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.061949][ T8961] device hsr_slave_0 entered promiscuous mode [ 100.118193][ T8961] device hsr_slave_1 entered promiscuous mode [ 100.157831][ T8961] debugfs: Directory 'hsr0' with parent '/' already present! [ 100.166745][ T8969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.196664][ T8969] team0: Port device team_slave_0 added [ 100.242753][ T8969] team0: Port device team_slave_1 added [ 100.260448][ T8966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.305983][ T8968] team0: Port device team_slave_0 added [ 100.317055][ T8968] team0: Port device team_slave_1 added [ 100.342325][ T8966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.405911][ T8966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.470175][ T8965] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.591196][ T8968] device hsr_slave_0 entered promiscuous mode [ 100.638703][ T8968] device hsr_slave_1 entered promiscuous mode [ 100.698065][ T8968] debugfs: Directory 'hsr0' with parent '/' already present! [ 100.712050][ T8966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.781899][ T8965] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.829839][ T8965] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.869383][ T8964] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.920420][ T8964] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.961508][ T8961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.061238][ T8969] device hsr_slave_0 entered promiscuous mode [ 101.098348][ T8969] device hsr_slave_1 entered promiscuous mode [ 101.167738][ T8969] debugfs: Directory 'hsr0' with parent '/' already present! [ 101.192409][ T8965] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.240109][ T8964] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.280943][ T8964] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.329433][ T8961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.417708][ T8961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.454779][ T8968] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.509384][ T8969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.574382][ T8961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.632502][ T8968] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.681479][ T8968] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.739155][ T8969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.772320][ T8969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.829790][ T8969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.889096][ T8968] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.109618][ T8966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.143742][ T8968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.154208][ T8965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.170715][ T8969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.183318][ T8964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.200615][ T8966] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.214771][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.223632][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.239819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.247533][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.263136][ T8969] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.282271][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.293211][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.301624][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.310832][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.319655][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.326828][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.335304][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.343367][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.353169][ T8964] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.373954][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.382380][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.390404][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.398624][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.407233][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.416765][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.423871][ T8976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.432630][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.441399][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.450514][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.457822][ T8976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.465375][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.474360][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.482987][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.490096][ T8976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.498085][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.512179][ T8968] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.524358][ T8965] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.540714][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.550386][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.559492][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.566537][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.574696][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.583750][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.592618][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.601411][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.610879][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.636054][ T8961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.657721][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.666346][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.676551][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.683701][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.696747][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.705507][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.714488][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.723557][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.732316][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.741371][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.749995][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.758487][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.766742][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.775861][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.784285][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.792745][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.803010][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.810995][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.841374][ T8966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.856849][ T8961] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.875342][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.884645][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.895776][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.904592][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.913404][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.920502][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.928575][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.936868][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.945588][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.954282][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.963533][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.970643][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.978404][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.987057][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.995536][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.004151][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.013092][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.021584][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.030508][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.039422][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.047577][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.055285][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.063172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.072259][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.080711][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.087797][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.096051][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.104848][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.113290][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.120375][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.128091][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.136680][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.145286][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.153779][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.163276][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.171670][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.180182][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.188305][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.226687][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.234637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.242265][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.251286][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.260670][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.267782][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.275497][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.284630][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.293296][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.300403][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.308169][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.316452][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.324756][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.333340][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.342074][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.350529][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.359715][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.368581][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.376877][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.386647][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.398741][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.413222][ T8969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.431025][ T8966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.455904][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.465422][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.475664][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.484694][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.494562][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.503125][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.512340][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.520993][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.529788][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.538160][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.546358][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.558892][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.566672][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.575429][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.584289][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.620686][ T8961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.636902][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.662039][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.671822][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.682336][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.690941][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.699755][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.707173][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.718370][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.726722][ T8976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.755393][ T8968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.770227][ T8964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.789331][ T8969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.826676][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.845457][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.863393][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.871977][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.880099][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.888967][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.896487][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.905040][ T3755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.934900][ T8961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.952764][ T8965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.966643][ T8968] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/12/01 22:05:04 executed programs: 6 [ 106.051295][ T9073] ================================================================== [ 106.059638][ T9073] BUG: KASAN: slab-out-of-bounds in pipe_write+0xe30/0x1000 [ 106.066921][ T9073] Write of size 8 at addr ffff888096e5f628 by task syz-executor.1/9073 [ 106.066931][ T9073] [ 106.066946][ T9073] CPU: 1 PID: 9073 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 106.066953][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 106.066966][ T9073] Call Trace: [ 106.066985][ T9073] dump_stack+0x197/0x210 [ 106.103606][ T9073] ? pipe_write+0xe30/0x1000 [ 106.108222][ T9073] print_address_description.constprop.0.cold+0xd4/0x30b [ 106.115237][ T9073] ? pipe_write+0xe30/0x1000 [ 106.119810][ T9073] ? pipe_write+0xe30/0x1000 [ 106.124382][ T9073] __kasan_report.cold+0x1b/0x41 [ 106.129303][ T9073] ? pipe_write+0xe30/0x1000 [ 106.133878][ T9073] kasan_report+0x12/0x20 [ 106.138193][ T9073] __asan_report_store8_noabort+0x17/0x20 [ 106.143903][ T9073] pipe_write+0xe30/0x1000 [ 106.148314][ T9073] new_sync_write+0x4d3/0x770 [ 106.152977][ T9073] ? new_sync_read+0x800/0x800 [ 106.157729][ T9073] ? __fget+0x37f/0x550 [ 106.161895][ T9073] ? apparmor_file_permission+0x25/0x30 [ 106.167427][ T9073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 106.173657][ T9073] ? security_file_permission+0x8f/0x380 [ 106.179273][ T9073] __vfs_write+0xe1/0x110 [ 106.183588][ T9073] vfs_write+0x268/0x5d0 [ 106.187816][ T9073] ksys_write+0x220/0x290 [ 106.192145][ T9073] ? __ia32_sys_read+0xb0/0xb0 [ 106.196894][ T9073] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 106.202357][ T9073] ? do_syscall_64+0x26/0x790 [ 106.207038][ T9073] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 106.213124][ T9073] ? do_syscall_64+0x26/0x790 [ 106.217807][ T9073] __x64_sys_write+0x73/0xb0 [ 106.222402][ T9073] do_syscall_64+0xfa/0x790 [ 106.226902][ T9073] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 106.232785][ T9073] RIP: 0033:0x45a679 [ 106.236672][ T9073] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 106.256267][ T9073] RSP: 002b:00007f2f0ae83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.264676][ T9073] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 106.272630][ T9073] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000005 [ 106.280595][ T9073] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 106.288552][ T9073] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2f0ae846d4 [ 106.296505][ T9073] R13: 00000000004c71c2 R14: 00000000004e31d8 R15: 00000000ffffffff [ 106.304468][ T9073] [ 106.306780][ T9073] Allocated by task 9072: [ 106.311108][ T9073] save_stack+0x23/0x90 [ 106.315255][ T9073] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 106.320908][ T9073] kasan_kmalloc+0x9/0x10 [ 106.325237][ T9073] __kmalloc+0x163/0x770 [ 106.329494][ T9073] pipe_fcntl+0x3f7/0x8e0 [ 106.333818][ T9073] do_fcntl+0x255/0x1030 [ 106.338045][ T9073] __x64_sys_fcntl+0x16d/0x1e0 [ 106.342804][ T9073] do_syscall_64+0xfa/0x790 [ 106.347291][ T9073] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 106.353155][ T9073] [ 106.355479][ T9073] Freed by task 0: [ 106.359184][ T9073] (stack is not available) [ 106.363574][ T9073] [ 106.365887][ T9073] The buggy address belongs to the object at ffff888096e5f600 [ 106.365887][ T9073] which belongs to the cache kmalloc-64(33:syz1) of size 64 [ 106.380534][ T9073] The buggy address is located 40 bytes inside of [ 106.380534][ T9073] 64-byte region [ffff888096e5f600, ffff888096e5f640) [ 106.393607][ T9073] The buggy address belongs to the page: [ 106.399224][ T9073] page:ffffea00025b97c0 refcount:1 mapcount:0 mapping:ffff888094666e00 index:0x0 [ 106.408311][ T9073] raw: 00fffe0000000200 ffff8880a934b648 ffff8880a934b648 ffff888094666e00 [ 106.416910][ T9073] raw: 0000000000000000 ffff888096e5f000 0000000100000020 0000000000000000 [ 106.425496][ T9073] page dumped because: kasan: bad access detected [ 106.431891][ T9073] [ 106.434198][ T9073] Memory state around the buggy address: [ 106.439811][ T9073] ffff888096e5f500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.447939][ T9073] ffff888096e5f580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.455979][ T9073] >ffff888096e5f600: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 106.464016][ T9073] ^ [ 106.469368][ T9073] ffff888096e5f680: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 106.477408][ T9073] ffff888096e5f700: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 106.485445][ T9073] ================================================================== [ 106.493921][ T9073] Disabling lock debugging due to kernel taint [ 106.610716][ T9073] Kernel panic - not syncing: panic_on_warn set ... [ 106.617374][ T9073] CPU: 0 PID: 9073 Comm: syz-executor.1 Tainted: G B 5.4.0-syzkaller #0 [ 106.626996][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 106.637051][ T9073] Call Trace: [ 106.640348][ T9073] dump_stack+0x197/0x210 [ 106.644682][ T9073] panic+0x2e3/0x75c [ 106.648579][ T9073] ? add_taint.cold+0x16/0x16 [ 106.653258][ T9073] ? pipe_write+0xe30/0x1000 [ 106.657851][ T9073] ? preempt_schedule+0x4b/0x60 [ 106.662792][ T9073] ? ___preempt_schedule+0x16/0x18 [ 106.664864][ T4087] kobject: 'loop5' (00000000614d657f): kobject_uevent_env [ 106.667901][ T9073] ? trace_hardirqs_on+0x5e/0x240 [ 106.667916][ T9073] ? pipe_write+0xe30/0x1000 [ 106.667926][ T9073] end_report+0x47/0x4f [ 106.667941][ T9073] ? pipe_write+0xe30/0x1000 [ 106.693382][ T9073] __kasan_report.cold+0xe/0x41 [ 106.698365][ T9073] ? pipe_write+0xe30/0x1000 [ 106.702969][ T9073] kasan_report+0x12/0x20 [ 106.705675][ T4087] kobject: 'loop5' (00000000614d657f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 106.707299][ T9073] __asan_report_store8_noabort+0x17/0x20 [ 106.707313][ T9073] pipe_write+0xe30/0x1000 [ 106.707336][ T9073] new_sync_write+0x4d3/0x770 [ 106.732251][ T9073] ? new_sync_read+0x800/0x800 [ 106.737025][ T9073] ? __fget+0x37f/0x550 [ 106.741189][ T9073] ? apparmor_file_permission+0x25/0x30 [ 106.746745][ T9073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 106.752997][ T9073] ? security_file_permission+0x8f/0x380 [ 106.758639][ T9073] __vfs_write+0xe1/0x110 [ 106.762978][ T9073] vfs_write+0x268/0x5d0 [ 106.767224][ T9073] ksys_write+0x220/0x290 [ 106.771561][ T9073] ? __ia32_sys_read+0xb0/0xb0 [ 106.776333][ T9073] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 106.781806][ T9073] ? do_syscall_64+0x26/0x790 [ 106.786495][ T9073] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 106.789678][ T4087] kobject: 'loop0' (00000000dd3e056e): kobject_uevent_env [ 106.792560][ T9073] ? do_syscall_64+0x26/0x790 [ 106.792577][ T9073] __x64_sys_write+0x73/0xb0 [ 106.792594][ T9073] do_syscall_64+0xfa/0x790 [ 106.813415][ T9073] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 106.819330][ T9073] RIP: 0033:0x45a679 [ 106.823386][ T9073] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 106.842996][ T9073] RSP: 002b:00007f2f0ae83c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.845058][ T4087] kobject: 'loop0' (00000000dd3e056e): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 106.851402][ T9073] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679 [ 106.851410][ T9073] RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000005 [ 106.851417][ T9073] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 106.851424][ T9073] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2f0ae846d4 [ 106.851431][ T9073] R13: 00000000004c71c2 R14: 00000000004e31d8 R15: 00000000ffffffff [ 106.852730][ T9073] Kernel Offset: disabled [ 106.907275][ T9073] Rebooting in 86400 seconds..